The listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Previously Presented) In a browser/server environment, a method for bootstrapping a 
user database associated with a web application from an application server, comprising: 

generating a user registration page request by a user of the web application and 
forwarding the user registration page request to the application server; 

by the application server, embedding security registration data requirements in the user 
registration page request and forwarding the user registration page request to a user registration 
page of the web application; 

by the user registration page of the web application, merging the security registration data 
requirements from the application server with user profile registration requirements of the web 
application to form a user information request page; 

sending the user information request page from the web application to the user; 

returning a filled out user information request page to a pass through server target on the 
application server; 

extracting security data from the filled out user information page by the application 
server; and 

bootstrapping a user account, for the web application, in the user database by the 
application server based upon the extracted security data. 

2. (Previously Presented) A method as recited in claim 1, further comprising: 
forwarding the filled out user information request page to the web application by the 

application server. 
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3. (Previously Presented) A method as recited in claim 1, wherein the application server 
makes available a set of user security requirements to the web application that define security 
data required to bootstrap the user account in the user database. 

4. (Previously Presented) A method as recited in claim 1, wherein the web application 
includes a success target and a failure target, wherein the success target provides a success 
destination when the bootstrapping is successful, and wherein the failure target provides a failure 
destination when the bootstrapping is unsuccessful. 

5. (Original) A method as recited in claim 4, wherein the success destination is a success 
URL and wherein the failure destination is a failure URL. 

6. (Cancelled) 

7. (Previously Presented) A method as recited in claim 2, wherein the forwarding the filled 
out user information page to the web application comprises: 

forwarding a subset of the security data and the collected user profile data. 

8. (Original) A method as recited in claim 7, further comprising: 

extracting the collected user profile data from the forwarded filled out user information 

page. 

9. (Original) A method as recited in claim 8, wherein the collected user profile data is stored 
in a user profile database. 
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10. (Previously Presented) In a browser/server environment, an apparatus for bootstrapping a 
user database associated with a web application from an application server, comprising: 

a means for generating a user registration page request by a user of the web application 
and forwarding the user registration page request to the application server; 

a means for, by the application server, embedding security registration data requirements 
in the user registration page request and forwarding the user registration page request to a user 
registration page of the web application; 

a means for, by the user registration page of the web application, merging the security 
registration data requirements from the application server with user profile registration 
requirements of the web application to form a user information request page; 

a means for sending the user information request page from the web application to the 

user; 

a means for returning a filled out user information request page to the application server; 

a means for extracting security data from the filled out user information page by the 
application server; and 

a means for bootstrapping a user account, for the web application, in the user database by 
the application server based upon the extracted security data. 

1 1 . (Previously Presented) An apparatus as recited in claim 10, further comprising: 
a means for forwarding the filled out user information request page to the web 

application. 

12. (Previously Presented) An apparatus as recited in claim 10, wherein the application 
server makes available a set of user security requirements to the web application that define 
security data required to bootstrap the user account in the user database. 
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13. (Previously Presented) An apparatus as recited in claim 10, wherein the web application 
includes a success target and a failure target, wherein the success target provides a success 
destination when the bootstrapping is successful, and wherein the failure target provides a failure 
destination when the bootstrapping is unsuccessful. 

14. (Original) An apparatus as recited in claim 13, wherein the success destination is a 
success URL and wherein the failure destination is a failure URL. 

15. (Cancelled) 

16. (Previously Presented) An apparatus as recited in claim 11, wherein the forwarding the 
filled out user information page to the web application comprises: 

forwarding a subset of the security data and the collected user profile data. 

17. (Original) An apparatus as recited in claim 16, further comprising: 

extracting the collected user profile data from the forwarded filled out user information 

page. 

18. (Original) An apparatus as recited in claim 17, wherein the collected user profile data is 
stored in a user profile database. 

19. (Previously Presented) A computer program product for enabling a computing system to 
bootstrap a user database associated with a web application from an application server, the 
computer program product in a brows er/server environment, comprising: 
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computer code for generating a user registration page request by a user of the web 
application and forwarding the user registration page request to the application server; 

computer code for, by the application server, embedding security registration data 
requirements in the user registration page request and forwarding the user registration page 
request to a user registration page of the web application; 

computer code for, by the user registration page of the web application, merging the 
security registration data requirements from the application server with user profile registration 
requirements of the web application to form a user information request page; 

computer code for sending the user information request page from the web application to 
the user; 

computer code for returning a filled out user information request page to the application 

server; 

computer code for extracting security data from the filled out user information page by 
the application server; 

computer code for bootstrapping a user account in the user database by the application 
server based upon the extracted security data; and 

a computer readable medium for storing the computer program product. 
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